Method and system for enabling merchants to share tokens
View Patent ↗One embodiment of the present disclosure provides a system and associated processes for sharing cardholder data (CHD) between a merchant that utilizes tokenization and a second merchant that may or may not utilize tokenization. In one embodiment, the merchant, or an employee of the merchant, can use the system and associated processes to reacquire CHD from a tokenization provider system. In one embodiment, the merchant identifies to the tokenization provider system a desire to share CHD, which is associated with a token, with a second merchant. The merchant and/or the tokenization provider system can then invite the second merchant to register with the tokenization provider system. Once registered with the tokenization provider system, the second merchant can access any CHD that the merchant associated with the second merchant.
1. A system for sharing cardholder data, the system comprising:
a tokenization system configured to:
receive cardholder data (CHD) of a customer from a first merchant;
associate a token with the CHD in physical computer storage by storing a relationship between the token and the CHD in the physical storage, enabling the token to be used to represent the CHD; and
electronically transmit the token to the first merchant so as to enable the first merchant to perform a first transaction for the customer without the first merchant maintaining a copy of the CHD at a local storage system;
a token-access granting system comprising computer hardware, the token-access granting system configured to:
receive an indication from the first merchant that one or more of the token or the CHD are to be shared with a second merchant;
in response to receiving the indication, authorize the second merchant to access one or more of the token or the CHD, enabling the second merchant to perform a second transaction for the customer;
associate a first authorization factor with the token;
associate the first authorization factor with the second merchant; and
provide the first authorization factor to the second merchant;
a token provisioning system configured to:
authenticate the second merchant;
receive a second authorization factor from the second merchant;
determine whether the second authorization factor matches the first authorization factor; and
in response to determining that the second merchant is authenticated and that the second authorization factor matches the first authorization factor, provide the second merchant with access to one or more of the token or the CHD without presenting the CHD to the second merchant, and
a transaction system configured to:
access a transaction request associated with the second transaction; and
perform the second transaction on behalf of the second merchant and the customer in response to the token provisioning system providing the second merchant with access to one or more of the token or the CHD,
wherein the token-access granting system is further configured to remove authorization from the second merchant to access one or more of the token or the CHD by disassociating one or more of the token or the CHD from the second merchant at the physical computer storage, and
wherein said removing authorization from the second merchant occurs in response to a triggering event monitored by the token-access granting system.
2. The system of claim 1 , wherein the token-access granting system is further configured to generate the first authorization factor.
3. The system of claim 1 , wherein the first authorization factor comprises one or more of a word, a number, an image, a sound, and a challenge.
4. The system of claim 1 , wherein the first authorization factor is random or pseudo-random.
5. The system of claim 1 , wherein providing the first authorization factor to the second merchant comprises providing an expected authorization factor response to the second merchant.
6. The system of claim 1 , wherein authenticating the second merchant comprises determining whether the second merchant is authorized to provide the second authorization factor.
7. The system of claim 1 , further comprising a registration system configured to register the second merchant.
8. The system of claim 7 , wherein the registration system is further configured to:
determine whether the second merchant is registered with the tokenization system; and
in response to determining that the second merchant is unregistered, initiate registration of the second merchant with the tokenization system.
9. A system for sharing cardholder data, the system comprising:
a token acquisition system configured to:
provide cardholder data (CHD) of a customer to a tokenization provider system; and
receive electronically a token associated with the CHD so as to enable a first merchant associated with the token acquisition system to perform a first transaction for the customer without the first merchant storing a copy of the CHD; and
a token sharing system configured to:
provide to the tokenization provider system an indication that one or more of the token or the CHD are to be shared with a second merchant enabling the second merchant to perform a second transaction for the customer;
generate an authorization factor;
provide the authorization factor to the tokenization provider system to associate with the second merchant and one or more of the token or the CHD;
provide the authorization factor to the second merchant enabling the second merchant to use the authorization factor to access one or more of the token or the CHD; and
instruct the tokenization provider system to remove authorization for the second merchant to access one or more of the token or the CHD,
wherein removal of authorization to access one or more of the token or the CHD comprises disassociating the token or the CHD from the second merchant at a physical computer storage, and
wherein the token acquisition system and the token sharing system comprise computer hardware.
10. The system of claim 1 , wherein the triggering event comprises at least one of a command received at the token-access granting system; a number of access of the token or the CHD; and a time period associated with access by the second merchant of the token or the CHD.